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PREFACE 


The "Lightning Effects on Future Aircraft Electronic Systems" workshop, 

November 4-6, 1981, sponsored by the NASA-Langley Research Center in 
conjunction with the Federal Aviation Administration (FAA) Technical Center, 
provided an ideal vehicle for information exchange. This workshop provided 
regional and headquarters personnel with an Insight into the magnitude of the 
problem, and the progress being accomplished through existing and future 
FAA programs. 

protection of electrical and electronic subsystems and equipments against 
the atmospheric electricity hazards constituted by lightning and static 
electricity must be taken into special account in the design of advanced 
technology aircraft. Two primary factors have contributed to an increased 
potential hazard to new generation aircraft: (1) The increasingly widespread 
use of digital microelectronic subsystems and/or avionic equipment which are 
inherently susceptible to upset and damage caused by electrical transients 
to implement flight and mission critical functions; and (2) the reduced 
electromagnetic shielding provided by many advanced structural materials. 

Present military and civil design guides and standards are being reviewed to 
assure adequate protection for new generation aircraft. 

The NASA-Langley Research Center Electronic System Branch of the Flight 
Electronic Division was the host for this workshop; which is a major element 
in the FAA Technical Center's Advanced Integrated Flight Systems (AIFS) 
program. The AIFS program objectives are to acquire and disseminate data, 
enhance communications, and provide Aviation Standards, lead and/or certify 
regions airworthiness/certification personnel with a vehicle for information 
transfer in this highly technological area of lightning research as related 
to aircraft flight safety. 

The personnel from the NASA-Langley Research Center Aircraft Electronic System 
Branch and their associates exhibited professionalism in the planning, assembling 


the technical experts and material, and conducting this workshop. It is with 
a deep and sincere sense of gratitude that we of the FAA would like to extend 
our aDnreciatlon to those nersons for a Inh well Hone. 
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LIGHTNING EFFECTS RESEARCH PROGRAM 

by 

Mr. Felix Pitts 

Langley Research Center 
National Aeronautics and Space Administration 

The current research program being pursued at the Langley 
Research Center on lightning and its effects on digital 
electronic systems will be presented. 










LIGHTNING EFFECTS 


• CURRENT TRANSPORT AIRCRAFT STRUCK ABOUT ONCE PER YEAR 

- ALUMINUM .SKIN 

- HYDRAULIC/MECHANICAL PRIMARY CONTROLS 

- MOSTLY NUISANCE PROBLEMS CAUSED BY LIGHTNING 


• FUTURE AIRCRAFT WILL EMPLOY 

- COMPOSITE STRUCTURE 

- DIGITAL AVIONICS/ELECTRONIC CONTROLS 

SUSCEPTIBLE TO DISTURBANCE 
POTENTIAL FOR UPSET 


• ■ NEED FOR FUTURE AIRCRAFT DESIGNS 

- BETTER UNDERSTANDING OF IN-FLIGHT LIGHTNING ENVIRONMENT 

- TECHNIQUES FOR ASSESSING DIGITAL SYSTEM PERFORMANCE IN 
LIGHTNING ENVIRONMENT 


LIGHTNING EFFECTS RESEARCH PROGRAM 
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LIGHTNING PHENOMENOLOGY 


by 


Dr. M. LeVine 


Goddard Space Flight Center 
National Aeronautics and Space Administration 


State-of-the-art of lightning knowledge: Theories of 
charge generation, the lightning discharge, stepped 
leaders, return strokes, fundamental electromagnetics 
of lightning, statistical distribution of lightning 
characteristics. 
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HISTORICAL PERSPECTIVE 
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FLIGHT EXPERIMENT DEFINITION AND SUMMARY 


by 

Mr. Felix Pitts 


Langley Research Center 
National Aeronautics and Space Administration 

Description of NASA F-106B in-flight direct strike measure¬ 
ment program. Electromagnetic measurements, instrumentation 
concept, and results summary. 























MEASUREMENTS SUMMARY 


MEASUREMENT 

SYMBOL 

AMPLITUDE 

RANGE 

SENSOR TYPE 

RATE OF CHANGE OF 

ELECTRIC FLUX DENSITY 

i) 

50 A/m 2 

FLUSH PLATE 

DIPOLE 

RATE OF CHANGE OF 

MAGNETIC FLUX DENSITY 

B 

2 X 10 4 TESLA/SEC 

MULTI6AP 

LOOP 

RATE OF CHANGE OF 

CURRENT 

i 

10 11 A/SEC 

INDUCTIVE 

CURRENT PROBE 


MEASUREMENTS SUMMARY 


MEASUREMENT 

SYMBOL 

DIMENSION 

SENSOR TYPE 

RATE OF CHANGE OF 
ELECTRIC FLUX DENSITY 

t 

A/M 2 

FLUSH PLATE 

DIPOLE 

RATE OF CHANGE OF 
MAGNETIC FLUX DENSITY 

6 

TESLA/SEC 

MULTIGAP 

LOOP 

RATE OF CHANGE OF 

CURRENT 

i 

A/SEC 

INDUCTIVE 

CURRENT-PROBE 

ELECTRIC FIELD 

E 

V/M 

FIELD MILL 

CURRENT 

I 

A 

CURRENT TRANSFORMER 
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MEASUREMENT LOCATIONS - 1980 



ALTITUDE 
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LIGHTNING RESULTS 



Mg. 1J l-dot tensor (flight #80-038). Mg. 24 B-4ot Motor (flight #80-038). fl?i l5 tensor (flight #80-038). 















DATA SUMMARY 


*• 


o 1980 

- 19 FLIGHTS 69 STORM PENETRATIONS 

- 10 STRIKES 17 TRANSIENTS: (7 f), S ft, 6 I) 

- RESULTS REPORTED: 

NASA TM 81996 “1930 DIRECT STRIKE LIGHTNING DATA' 

AIAA 81-0083 "E/M MEASUREMENT OF DIRECT LIGHTNING STRIKES TO A/C” 

o 1931 

- 29 FLIGHTS 111 STORM PENETRATIONS 

- 10 STRIKES 27 TRANSIENTS 

1 BOOM CURRENT (BOEING) 

16 ft, 10 ft (DISTANT) 

o MAXIMUM MEASURED VALUES 

ft 30.5 A/m 2 -> 390 KV/0,1 ns 

ft 1160 T/s -2 KA/0.1 „s 

I 15 KA 


OTHER F-106 LIGHTNING EXPERIMENTS 


• ATMOSPHERIC CHEMISTRY EXPERIMENTS - LaRC 

1980 - SHOWED N 2 0 ENHANCEMENT NEAR LIGHTNING 

1981 - SHOWED CO ENHANCEMENT NEAR LIGHTNING 

• X-RAY EXPERIMENT - U. WASHINGTON 

1980 - SHOWED INCREASED COUNT NEAR LIGHTNING 

1981 - BEING EVALUATED 

• OPTICAL SIGNATURE EXPERIMENT - NSSL 

- PROTOTYPE FOR ORBITAL LIGHTNING MAPPER 

- RESULTS BEING ANALYZED AT NSSL 
a STORM SCOPE 

- TURBULENCE/LIGHTNING DO NOT ALWAYS CORRELATE 

- LIGHTNING LOCATIONS DISPLAYED TEND TO BE FURTHER FROM 
AIRCRAFT POSITION THAN RADAR CONTOURS (BUT AT SAME BEARING) 

a BOEING DATA LOGGER 

- FIRST BOOM CURRENT RECORDED AUGUST 1981 
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DATA SYSTEM DESCRIPTION 


by 


Mr. Mitchel E. Thomas 


Langley Research Center 
National Aeronautics and Space Administration 


The research data-gathering system on the F-106B aircraft 
developed for in-flight measurement of direct and nearby 
lightning strike characteristics is described. Details of 
the design and performance are presented for system com¬ 
ponents including the digital transient recorders, wideband 
analog recorder, fiber optic control and diagnostic links, 
power system isolation, and system shielding. 
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LIGHTNING INSTRUMENTATION SYSTEM 


• HIDE BANDWIDTH FOR SUBMICROSECOND SIGNAL RESOLUTION 

- 10 ns SAMPLE INTERVAL 

• CONTINUOUS RECORDS FOR DEFINITION OF FULL LIGHTNING SCENARIO 

- 15 MHz ANALOG BANDWIDTH 

• PROTECT AGAINST SPURIOUS RESPONSES (EMI) 

- SHIELDED ENCLOSURE 

- MOTOR-GENERATOR POWER ISOLATION 

- FIBER OPTIC CONTROL 

• AUTOMATIC OPERATION 


LIGHTNING INSTRUMENTATION SYSTEM 
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TRANSIENT RECORDER 



analog 

OUTPUTS 


DIGITAL 

OUTPUTS 


EXPANDED TRANSIENT WAVEFORM RECORDER FEATURES 

I 6-BIT AMPLITUDE RESOLUTION (1.56%) 

• FREQUENCY RESPONSE - DC TO 50 MHz 

• 131072 ( 2 V ) DATA WORD CAPACITY 

• SAMPLE RATES UP TO 100 MHz 

• DATA WINDOW LENGTH OF 1310 MICROSECONDS AT 100 MHz 

• INTERNAL OR EXTERNAL TRIGGERING 

• DATA WINDOW SELECTION WHICH IS BEFORE, DURING, OR 
AFTER TRIGGER EVENT 
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WIDEBAND ANALOG RECORDER 


• VIDEO RECORD TECHNIQUES 

« FREQUENCY MODULATED CARRIER 

• 10 Hz TO 15 MHz BANDWIDTH 

• 12 MINUTES RECORD TIME 


• 2 CHANNELS & 2 AUXILIARY 


LOGARITHMIC AMPLIFIER 


a 

1 







COMPRESSION AMPLIFIER 


• 15 MHz BANDWIDTH 

• DIFFERENTIAL INPUT, 50 OHM IMPEDANCE 
. E 0 - 1 ♦ .3 LOG E, n 

• 60 dB DYNAMIC RANGE 



SIMPLIFIED SHIELDING TOPOLOGY 

AIRCRAFT 
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LIGHTNING INSTRUMENTATION CONTROL 



FIBER 

OPTIC 

CABLES 



transient 

RECORDER 


TRANSIENT 

RECORDER 

MAGNETIC 

TAPE 

RECORDER 


x 10’ 
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ELECTROMAGNETIC SENSORS FOR AIRCRAFT LIGHTNING RESEARCH 


by 


Mr. Klaus P. Zaepfel 


Langley Research Center 
National Aeronautics and Space Administration 


Electromagnetic sensors designed for measuring EM fields 
and currents during lightning strikes to the F-106B research 
aircraft are described. Sensor theoretical basis, perform¬ 
ance, and parallel-plate transmission line used to check and 
calibrate these sensors are described. 


| fRKXDIM} PiOI BUMMWr FILMS 
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MEASUREMENT REQUIREMENTS 


MEASUREMENT 

FIELD CHANGE 


J T 

50A/m 2 (AE ~ 6 x 10 5 per 0. lps) 

> 100V 

B 

2 x 10 4 Tesla/s 

> 100V 

• 

I 

10kA per 0. lps 

> 100V 


SENSOR CHARACTERISTICS 

• DESIGN PRINCIPLES DEVELOPED BY AIR FORCE WEAPONS LAB FOR NEMP 

• WIDE BANDWIDTH: 2:80MHz (t R <4.4 ns) 

• SIMPLE GEOMETRY: CALIBRATION BY RULER 

• APPROXIMATELY LOO V OUTPUT FOR FULL-SCALE DIRECT STRIKE 
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DEFINITIONS: ELECTRIC FIELDS 



D, C/r» l 

( Electric Flu* Density) 
ft , C/m 1 

CSurface. Charge. Density) 
For flat plate, D-f % 

D= €. E i^Kert £ «* 

of dicJtcfric 


6 


tE 


I,*CORONA 

CURRENT 


Xi* D‘Area« DISR.ACE MENT 
CURRENT 


\Fp 

V I t » TOTAL CURRENT 


No Corona , I t =D-Aren 

In Corona , I t * (J c + 6)Area 

• if Are** 


SENSOR FUNDAMENTALS 



NO CORONA CORONA 

D«EE 

1^‘Irf * D-AREA I t »(j c fD)AREA 

v OUT * R It 
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D-DOT SENSOR IN F-106 FUSELAGE PANEL 
















®®®®®®C9® 

H- FIELD 

®®®®®®®® 


MAXWELL-FARADAY LAW: J® 'dA 

V«r--X J $“' !A 


B- DOT S«A»*f 


, - AI dA 

dtJ A 2wr 


■-MI, M>^/ a |< 1A I-DOT Sensor 























I-DOT SENSOR 



FLAT-PLATE TRANSMISSION LINE CALIBRATOR 



SAMPLING INTEGRATOR DISPLAY 
OSCILLOSCOPE OSCILLOSCOPE 





























SUMMARY OF SENSOR PARAMETERS 


SENSOR 

LOCATION 

DESIGN 

SENSITIVITY 

RISETIME 

(10%-90%) 

J T 

FUSELAGE/TAIL 

CIRCULAR 

4.1x10 "^m 2 

2.4 ns 

J T 

WINGS 

RECTANGULAR 

-2 2 
2.7x10 m 

3.0 ns 

B-DOT 

FUSELAGE 

2 GAPS, 4 LOAD POINTS 

5.7xl0" 3 m 2 

.85 ns 

B-DOT 

WINGS 

1 GAP, 1 LOAD POINT 

-3 2 
5.5x10 nr 

2.0 ns 

1 -DOT 

RADOME 

1 GAP. 4 LOAD POINTS 

2. 1x10 _9 H 

0.8 ns 


FIELD MILLS 
















» 4 

INCHES 







LIGHTNING MODELING 


by 


Dr. M. LeVine 


Goddard Space Flight Center 
National Aeronautics and Space Administration 


The ground-based lightning measurements made at Wallops 
Flight Center concurrently with the in-flight direct strike 
measurements are described. Lightning mathematical model 
development to arrive at credible lightning models for use 
in induced effects electromagnetic coupling studies is 
discussed. 









OBSERVER 


CHANNEL GEOMETRY 


X-Z PLANE 


Y-Z PLANE 
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RADIATED WAVE FORM 


XZ PLANE Y-Z PLANE 




FREQUENCY (kHz) 
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INTERPRETATION OF IN-FLIGHT TEST DATA APPROACH, 
PROBLEMS, AND OUTLOOK 


by 

Dr. R. A. Perala 


Electromagnetic Applications, Incorporated 

Discussion of the direct strike data interpretation pro¬ 
blem and issues to be resolved. Review of lightning/aircraft 
interaction process and aircraft electrical resonance con¬ 
siderations. Approach for generalization of F-106 data to 
other aircraft classes. 
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• lilt LIGHlim/AlRlKAI I INILRAU ION I’WMISS 

• THE NEED FOR IN-FLIGHT TEST DATA 

I EXTENSION OF DATA TO OTHER AIRCRAFT 

• LIGHTNING MODELING 

• AIRCRAFT MODELING 

• EXAMPLES 



Stepped leader attachhent and continued Ho return stroke through the aircraft 

PROPAGATION FROM AN AIRCRAFT 




LIGHTNING/AIRCRAFT INTERACTION DESCRIPTION 


r 



AIRCRAFT IN LARGF STATIC FLFCTRIC F IFI 1>, 10-100 kV/m IYPICAI 
AIRCRAI1 PROIIAULY ALHI ADY CIIARl.ll> IlY IIIIIUII I I ( I H 11 11 A I I UN 
APPROACHING STEPPED LEADER GIVES LARGE E, af/.it 
WHEN E LARGE ENOUGH., AIRCRAFT STREAMERS 
STREAMER ATTACHES TO APPROACHING LEADER 

CHARGE FROM LEADER DEPOSITED ON AIRCRAFT AND ELEVATES ITS POTENTIAL 

WHEN ITS POTENTIAL IS HIGH ENOUGH, LEADER CONTINUES FROM AIRCRAFT 
TO DESTINATION 

STEPPED LEADER CURRENT FLOWS THROUGH AIRCRAFT UNTIL RETURN STROKE 
RETURN STROKE CURRENT LOWERS AIRCRAFT POTENTIAL 
AIRCRAFT IN CORONA DURING MUCH OF THIS TIME 


APPROACHING LEADER E FIELDS 




HEIGHT ABOVE GROUND M 

Electric gradient below leader channel: (•) as function 

OF HORIZONTAL DISTANCE AND 0>) AS FUNCTION OF HEIGHT OF 
LEADER TIP ABOVE GROUND 

A5SLWE H « |j[ IT * x 10® m/tec 

* 1.2 * I0 7 «t 1000 m 


HE GET 


1.5 x I0 10 at 10-20 m 









AIRCRAFT STREAMER1NG 


I CURRENTS PROBABLY LESS THAN 100A, BASED ON GROUND STREAMER DATA 

• WAVESHAPES: 10 v«c RI SET I ME S 

• NEGATIVE CHARGE ENTERING AIRCRAFT AT STREAMER POINT 

• STREAMERS CAN OCCUR FROM CRITICAL POINTS 
I STREAMERS INFLUENCED BY STATIC FIELD 

I ELECTRIC FIELD ON AIRCRAFT REVERSES AT ATTACHMENT 

STEPPED LEADER CURRENT 
FLOW THROUGH AIRCRAFT 

I AIRCRAFT NEEDS TO ACCUMULATE >100 vC OF CHARGE FOR STEPPED LEADER TO 
CONTINUE ON FROM AIRCRAFT 

I IF LEADER CURRENT IS 1000A RISING IN 100 ns, CHARGING TIME IS ABOUT 150 
I DURING THIS TIME AIRCRAFT NORMAL ELECTRIC FIELDS APPROACH 3 MV/* 

I THIS GIVES 3E/3t «2 X 10 13 V/m/sec 

I LEADER CURRENT CONTINUES THROUGH AIRCRAFT AND ELECTRIC FIELD STAYS 
CONSTANT AND CURRENT ASSUMES THE SLOWLY INCREASING ARC CURRENT UPON 
WHICH IS SUPERIMPOSED LEADER PULSE CURRENTS 

| AIRCRAFT IS IN CORONA DURING THIS PHASE 
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ISSUtS or INURISI AND 
THE NEED FOR lN-EUfitll TEST DAI A 

I Attachment Process 

• What are i and *\ ? 

• lluw IMF'UR I ANT ARE NONLINEAR (lllKONA, SIRIAMIR-.' Hill I:,.' 

• What is the equivalcni cirliiii hi ihi iiaihr (hiannll imci rani i , 

NORTON CURRENT SOURCE) 

I Return Stroke 

• What are e and }| ? 

« What are h and ^ ? 

« How IMPORTANT ARE NONLINEAR EffECTS? 

• What is the return stroke equivalent circuit? 

I Nearby Lightning; How important is it? 

I How Applicable are State of the Art Lightning Models at Aircraft Altitu::?' 

• Models so far are Based on Terrestrial Observations 

• Models have not been tested at aircraft altitudes 

I Obtain Data on Intracloud Lightning 

I How Does the Aircraft Interact with Lightning? Is the Lightning Cnv 
Itself Hodeified by the Presence of an Aircraft? Is it Different f,>r 
Different Aircraft, 


THE OBJECTIVE OF DATA INTERPRETATION 

I What are the lightnings that cause the F106B responses? 

(an inverse problem) 

I What would be the response of a different aircraft? 

I Can a methodology be developed for extending in-flight data 

FROM ANY AIRCRAFT TO ANY OTHER AIRCRAFT? 
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APPROACH 


Lightning 

Environment 

, Models 
I (nr-liman .etc.) 


FI06 Crnd.Teet 
Data (Scale Mo¬ 
deling full sr 



I 



Compute Near 
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Nearby Case 


Near 


Attached 
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Parameter 


Field 
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neter Study 
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Study 


Data 


Data 
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J Modifications 

1 

| 

Compare 
Measured & 
Predicted 













Channel 


Linear Atto- 

Models 

- 

1 

:hed Stroke 
Modeling 



j _Identification of Important Parameters 

_ Significance of Nonlinearities 

— Applicability of Present Lightning Models 
- Identification of Extrapolation Methodology 
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IMPORTANCE OF NEAR MISS DATA 


I Interaction Calculations Can Be Done Linearly, Without 
Complications Introduced By Nonlinearities 


I Data Can Be Used To Infer Nearby Lightning Electromagnetic 
Waveforms At Aircraft Altitudes To Correlate With Predictions 





CURRENT (kA) 


I 



Slope * v 



'2 *3 '4 0, l ‘2 '3 »4 

Current Distribution for the Model of Lin et al. (1980) in which the 
Breakdown Pulse Current is Constant with Height. The Constant Velocity 
of the Breakdown Pulse Current is v. Current Profiles are Shown at Four 
Different Times t ^thr ugh t 4 , When the Return Stroke Wavefront and the 
Breakdown Pulse Current are at Four Different Heights t) Through i 4 , 
Respectively. (From Oman) 


- total currant 

-corona currant 

—-uniform currant 

. pulaa currant 


X 


x ' 

. t 

w * 

-- 1 —— 

u 10 

20 30 40 50 60 70 80 

TIME (psec) 

90 

100 
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Return Stroke Current Components at Ground for a 
Typical Subsequent Stroke Calculated from Measured 
Electric and Magnetic Fields (From Uman) 
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Calculated Vertical Electric Fields for a Typical Subsequent Return Stroke (From Uman) 













Calculated Horizontal Electric Fields for a Typical Subsequent Return Stroke (From Uman) 
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Coordinates Set Up with Externally Supplied H Fields 
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CORONA AND STREAMER EFFECTS 


by 

Dr. R. A. Perala 

Electromagnetic Applications, Incorporated 

Description of possible corona effects on direct strike data, 
review of elements and state-of-the-art of corona modeling, 
and application of corona modeling to lightning/aircraft inter¬ 
action. Corona to arc transition, importance, and modeling of 
streamers. 
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ELECTRON AND ION LOSS MECHANISMS 

• Electron attachment to neutral air molecules to form negative ions 

ATTACHMENT RATE « 

E 

I Recombination of positive ions and electrons to form neutral particles 

RECOMBINATION RATE 0 

I Recombinazion of positive and negative ions 

RECOMBINATION RATE Y 


AIR CHEMISTRY EQUATIONS FOR CORONA 


d % (t) + [Bn * (t) ♦ o - G] n (t) * Q(t), 
dt 

dn - (t) ♦ C-rn ♦ (t) ] n U) *0. n (t). 
dt e 

dn + (t) ♦ [Bn g (t) + -yn _ (t) 1 « Q (t) ♦ G n g (t), 
dt 


AIR CONDUCTIVITY o = d ( % n g ♦ v< (". ♦ «*) 

I Conductivity ° Feeds Back Into Maxwell's Equations 
v x e = n 

V X H * c || ♦ i>E 

I Coefficients g, 0g , Ug in Turn Depend Upon e 
• Coefficients Also Depend Upon Humidity and Air Pressure 
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If we assume space charge neutrality 

However, space charge effects are important for corona, so we need to includl 
o T + ifi. r n 

V . u n u 

p = (n + - n_ - n g ) q 

J = (n + V + - n_V_ - n e V fi ) q 

Also need to include particle dynamics 

= q s (e + v s x b), s Refers to species 


RESULTS FAR A ROD-PLANE GAP. 

NUMERICAL RESULTS ASSUME SPACE CHARGE NEUTRALITY. 




EFFECTS OF NONLINEARITIES 


I Air conductivity may shield apertures'-. 

a r 

I Air breakdown may cause increases in gf , for example, as 

INDICATED ON A PREVIOUS SLIDE 

• Aircraft complex resonant frequencies may change because corona 

AND STREAMERS EFFECTIVELY EXTEND AIRCRAFT DIMENSIONS 


STREAMERS 

I Based on ground measurements, amplitudes limited to -100 A 

I No MODEL BASED ON FIRST PRINCIPLES IS KNOWN TO EXIST FOR STREAMER 

FORMATION AND PROPAGATION 

I At PRESENT, MODELING IS PROBABLY BEST ACCOMPLISHED BY PRESCRIBING 
NONLINEAR CURRENT SOURCE REPRESENTATIONS 
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AN ANALYSIS METHOD FOR THE F-106 DIRECT STRIKE DATA 


by 


Dr. T. F. Trost 


Texas Tech University 


Summary of characteristics of electric and magnetic fields 
and currents measured during strikes. Description of 
laboratory modeling of direct strike fields and currents 
including test apparatus, airplane model, and data acquisi¬ 
tion system. Comparison of model results with in-flight data: 
Resonances, attachment points, and waveforms. First order 
interpretation of in-flight data as a lightning input-aircraft 
response problem. 
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F-106 DIRECT STRIKE DATA 
OBJECTIVES 

I. MEASURE STRENGTHS AND WAVEFORMS OF ELECTRIC AND MAGNETIC 
FIELDS ON AIRCRAFT 

II. INTERPRET WAVEFORMS 

A. DETERMINE WHICH CHARACTERISTICS OF WAVEFORMS ARE 
DUE TO ELECTROMAGNETIC MODES OF AIRCRAFT/CHANNEL 

B. INFER NATURE OF IONIZATION PROCESSES 

C. STATE IMPLICATIONS OF MEASURED WAVEFORMS REGARDING 
COUPLING TO INTERIOR 


APPARATUS FOR 
AIRCRAFT-LIGHTNING MODELING 
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TRANSFER FUNCTIONS 
FOR THE F-106 MODEL 


FREQUENCY DOMAIN DESCRIPTION 

TRANSFER FOURIER TRANSFORM OF OUTPUT 
FUNCTION = FOURIER TRANSFORM OF INPUT 

INPUT: B-DOT NEAR LOWER WIRE 
OUTPUTS: D-DOT AT NOSE 

B-DOT ON FUSELAGE OVER RIGHT WING 
B-DOT AT VARIOUS LOCATIONS NEAR SURFACE 
D-DOT AT VARIOUS LOCATIONS NEAR SURFACE 


EXAMPLES OF TRANSFER FUNCTIONS 


ie-3 over 

358 1 
300 1 


D-DOT AT NOSE 







PRONY ANALYSIS OF FIELDS 
MEASURED ON THE MODEL 


REPRESENT SENSOR OUTPUT WAVEFORMS AS FOLLOWS 

N a . t 

V(t) = 1 A.e cos(w.t + $.) 

i*I 1 11 

2N s.t 
v ** _ i 


S i “ °i + ^“i ARE na TURAL FREQUENCIES OR POLES 
R. ARE RESIDUES 








Model ot thunderstorm charge distribution. 


CHARACTERISTIC TIMES 

CORONA CURRENT RISETIME (LABORATORY MEAS.) 10-50 ns 

LIGHTNING CURRENT RISETIME (REMOTE ELECTRIC 

FIELD MEAS.) 30-8000 ns 

PERIOD OF LOWEST ELECTROMAGNETIC MODE OF 

F-106 (LABORATORY SCALE MODEL MEAS.) 110 ns 

TIME CONSTANT FOR CHARGING F-106 IN 

CHANNEL (ESTIMATE) -v.250 ns 

F-106 DIRECT STRIKE RISETIME OF B 20-40 ns 

OF D 20-1000 ns 
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IE 6 A/s ft 



0 1.02 2.04 0 4.13 8.25 

.51 1.53 2.55 2.06 6.19 10.31 

IE-6 S IE 6 HZ 



.51 1.53 2.55 

IE-6 S 


SOME RESULTS FROM COMPARISON 
OF MODEL AND IN-FLIGHT DATA 


IN-FLIGHT FREQUENCY SPECTRUM PEAKS ARE IN 
GENERAL AGREEMENT WITH MODES OF MODEL 
AT 9MHz AND 21 MHz 

SHOULD BE ABLE TO INFER SOME CHANNEL PROPERTIES 
FROM IN-FLIGHT SPECTRA 

IN-FLIGHT D-DOT WAVEFORMS LONGER DURATION THAN 
B-DOT WHEREAS DURATIONS SAME ON MODEL 







AN OVERVIEW OF THE ELECTRICAL/ELECTROMAGNETIC IMPACT OF 
ADVANCED COMPOSITE MATERIALS ON AIRCRAFT DESIGN 


by 


Dr. John C. Corbin, Jr. 


Wright-Patterson Air Force Base 


The impact of the application of composite structures in 
aircraft presented from the electromagnetic viewpoint. 
Fundamental electromagnetic differences between metal and 
composite aircraft are described and technology develop¬ 
ments in shielding effectiveness, joint and fuel system 
design, and power system/equipment integration are reviewed. 
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TECHNOLOGY TRENDS 
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KEVLAR/EPOXY 

HYBRIDS (CARBON, GLASS & KEVLAR) 




AIRCRAFT APPLICATIONS 

• YF-16 FORWARD FUSELAGE 


• F/A 18 HORNET 


• AV-8B V/STOL 


• 767 













F/A-18A MATERIALS DISTRIBUTION 






























AV-8B COMPOSITES APPLICATIONS 



5 006 POUNDS OF STRUCTURE 

1,317 POUNDS OF GRAPHITE/EPOXY 














767 NON METAL STRUCTURE 



KEVLAR 

COMPOSITE(GR/EP-KEV) 
























AIR FORCE STUDY (1979) 
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DETERMINE IF EM PROGRAMS ARE 
IN BALANCE WITH STRUCTURAL 
PROGRAMS 
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STANDARDS AND SPECIFICATIONS, AND 
DEVELOPMENT OF STANDARD ACCEPTED TEST 
METHODS FOR CRITICAL AREAS (SUCH AS 
SHIELDING EFFECTIVENESS) 



























Washer Specimen Mounting Detail 



GP03-0153-1 












Frequency - MHz 























0.01 0.1 1 10 100 1,000 10,000 100,000 

Frequency - MHz gpo3-ois3« 



























EMI LEAKAGE 

TEST PANEL 

LIST 

CONFIGURATION 

IOENT. 

CONFIGURATION 

JOINT 

JOINT SrAL CONFIGURATION 

A 

G/E Tape Mat'l 

None 

None 

8 

G/E Cloth 

None 

None 

C 

Aluminum 

None 

None 

D 

G/E (Tin Plated) 

None 

None 

G 

G/E-A 1 umi nun 

Single Lap 

Shear 

Form-In-P lace (FIP) Seal 

H 

G/E-A 1uminum 

Single Lap 

Shear 

Tin Plated-FIP Seal 

J 

G/E-A 1uminum 

Single Lap 

Shear 

FIP Seal 

K 

G/E-Aluminum 

Single Lap 

Shear 

FIP Seal -Finger Stock 

l 

G/E-G/E 

Single Lap 
Shear 

Tin Plated 

M 

G/E -G/E 

Double Lap 

Shear 

Fay Seal 

N 

A1um1n urn-A 1umin um 

Double Lap 
Shear 

Fay Seal 

P 

G/E -Aluminum 

Single Lap 
Shear 

FiP Seal-Finger Stock 

R 

G/E-G/E 

Single Lap 

Tin Plated-FIP Seal- 
F1nger Stock 
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EMI TEST PANEL DATA 

RELATIVE PERFORMANCE OF PANELS WITH SEAMS 


Panel Description 

Seam Preparation *** 

Relative 

Performance 

E H 

A I um inum~A1uminum 

None Double Lap Shear (DLS) 

100 

97 

Graphite/Epoxy Cloth - Graphite/ 
Epoxy Cloth 

Tin Plated, Sealed 

84 

84 

Aluminum - Graphite/Epoxy Cloth 

Ponding Strip, Sealed 

69 

79 

Graphite/Epoxy Cloth - Graphite/ 
Epoxy Cloth 

Tin Plated, Ponding Strip 
Sealed 

64 

78 

Aluminum - Graphite/Epoxy Cloth 

Sealed 

58 

99 

Aluminum - Graphite/Epoxy Cloth 

Tin Plated, Sealed 

49 

96 

GraphIte/Epoxy Cloth - Graphite/ 
Epoxy Cloth 

None (DLS) 

50 

4 

Graphite/Epoxy Cloth - Graphite/ 
Epoxy Cloth 

Bonding Strip, Sealed 

37 

55 

Graphite/Epoxy Cloth - Graphite/ 
Epoxy Cloth 

Sealed 

10 

68 


C 

(4) 

A1 uminum 

99 

99 

D 

(4) 

Tin Plated, Graph 1te/Epoxy Cloth 

95 

89 

A 

(4) 

Graphite/Epoxy Tape 

80 

71 

B 

(4) 

GraphIte/Epoxy Cloth 

70 

79 

NOTES: 

1. AM panels show relationship to best panel whoso value is 100 


7 . E (electric field) 

3. H (magnetic field) 

4. One piece panels (no seams) 

3. Single lap shear (SLS) unless otherwise indicated 

6. The seals are a formed-ln-place rubber gasket used to prevent water leaks 
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G/E-G/E Single Lap Shear Tin Pla+e-Fip Seal-Finger Stock 








RATIO OF IMPEDANCES 










fuselage shielding 
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TRIMETRIC VIEW OF WIRE ROUTING 



Bond load boxes to Al Da^ei 
All loads in RF tight boxes 








INDUCED VOLTAGE ON SINGLE WIRE 



Frequency - Hz 










10k 100k 1M 10M 100M 1G 10G 

Frequency - Hz 







SHIELDING OF ALUMINUM AND COMPOSITE FIXTURES 

RELATIVE TO EXPOSED GROUND RETURN WIRE 



Frequency - MH* 
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Termination 













EMI OUTDOOR TEST SETUP 
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EMI TEST SETUP IN ANECHOIC CHAMBER 

(A) ANTENNA, (B) FIELD METER, (C) WING 
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INTERMODULATION EFFECTS 




FOUND (NO HARMONICS GENERATED) 
FROM HIGH CURRENT LEVEL TESTS 
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CIRCUIT AND PROBE ATTACHMENT POINTS 


High Voltage Probe Locos 
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OVERALL FINDINGS 
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HANDLED IN NORMAL AIRCRAFT 
DESIGN 



AV-8B COMPOSITE FORWARD FUSELAGE DEVELOPMENT 



ELECTRICAL POWER 




6/E PANELS AND COUPONS WITH BOLTED JOINTS 
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CONDUCTIVE SURFACE COATING REQUIRED TO 
PREVENT LIGHTNING PENETRATION OF G/E TEST 
SPECIMENS (FIG 6-65) 





SIMPLIFIED BLOCK DIAGRAM OF LIGHTNING TEST SETUP 















ELECTRICAL POWER 


m 



ARRESTORS AT REMOTE POINTS OF 
POSSIBLE LIGHTNING ENTRY (LIGHTS, 
PROBES, ETC.) 
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BOEING STUDY PROGRAM 
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TASK 4 • DESIGN GUIDE 
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STRUCTURAL APPLICATION OF COMPOSITE MATERIALS AND 
THE DIRECT EFFECTS OF LIGHTNING STRIKES 


by 

Mr. William E. Howell 


Langley Research Center 
National Aeronautics and Space Administration 

The direct effects of lightning strikes on composite 
materials and protection approaches will be described. 
Approaches to EMI shielding which maintain weight advan¬ 
tage and structural integrity over the life of the 
airframe will be discussed. 
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LIGHTNING EFFECTS ON COMPOSITE STRUCTURES 



KEVLAR 49 EPOXY 
GRAPHITE EPOXY 


F-106B RESEARCH AIRCRAFT 
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EXAMPLE PROTECTION SYSTEMS 


0 FLAME SPRAYED ALUMINUM 
0 ALUMINIZED GLASS (THORSTRAND® ) 
0 ALUMINUM STRIPS/TAPE 
o METAL SCREEN OR WIRE MESH 


CERTIFICATION CURRENT TEST WAVEFORM C 

FOR 

EVALUATION OF DIRECT EFFECTS 



OMPONENTS 


COMPONENT D 


CURRENT 


COMPONENT C 






F-106B COMPOSITE FIN TIPS 


0 KEVLAR-EPOXY WITH THORSTRAND® 

0 GRAPHITE/EPOXY WITHOUT PROTECTION 

0 GRAPHITE/EPOXY WITH FLAME SPRAYED ALUMINUM 

0 KEVLAR/EPOXY WITH FLAME SPRAYED ALUMINUM 
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F-1Q6B COMPOSITE FIN TIP A S S r M: - 









EFFECT OF LIGHTNING 
ON 






























CONCLUDING REMARKS 


0 COMPOSITES EXHIBIT STRUCTURAL ADVANTAGES COMPARED TO METALS 

0 EXCELLENT IN-SERVICE PERFORMANCE AND MAINTENANCE EXPERIENCE HAVE BEEN 
ACHIEVED WITH OVER 150 COMPOSITE COMPONENTS DURING 8 YEARS AND OVER 
2 MILLION HOURS OF FLIGHT SERVICE WITH NO SIGNIFICANT DAMAGE FROM 
LIGHTNING STRIKES 

0 EFFECTS OF LIGHTNING ON COMPOSITE MATERIALS AND LIGHTNING PROTECTION 
SYSTEMS ARE BEING EVALUATED 

0 GROUND AND FLIGHT DATA BASE IS BEING DEVELOPED FOR THE ELECTRICAL 
SAFETY OF AIRCRAFT 
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LIGHTNING INTERACTION ANALYSIS 


by 


Dr. Karl S. Kunz 


Kunz Associates, Incorporated 


Description of lightning interaction analyses and how 
they are performed including lightning model, aircraft 
geometry, interior equipment and cable layout, and model¬ 
ing of interconnecting system. Sample direct strike 
problem and (generic) expected results. Overview of 
mathematical basis used in interaction analysis and 
description of finite difference method. 
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WHAT IS A LIGHTNING INTERACTION ANALYSIS - 


* A MATHEMATICAL TREATMENT OF THE PROPAGATION OF 
ELECTROMAGNETIC ENERGY FROM A LIGHTNING BOLT TO 
AN AIRCRAFT AND ON INTO SUSCEPTIBLE INTERIOR 
EQUIPMENT 

• USES EXPERIMENTALLY DETERMINED CHARACTERISTICS 
AS THE INPUTS OF MATHEMATICAL MODELS 

• PREDICTS RESPONSE LEVELS (VOLTAGE AND CURRENT) AT 
THE INPUTS (PINS) OF SUSCEPTIBLE EQUIPMENT 

* ALLOWS UPSET/DAMAGE/FAILURE ASSESSMENTS TO BE MADE 
FOR THE SUSCEPTIBLE EQUIPMENT 


WHY A LIGHTNING INTERACTION ANALYSIS AND NOT JUST EXPERIMENT 

* EXPANDS OW EXPERIMENT 

- SOURCE VARIATIONS, AIRCRAFT MODIFICATIONS AND 
.EQUIPMENT CAN BE ACCOMODATED 

* INCREASES UNDERSTANDING 

- MODELING INCREASES UNDERSTANDING AS MODELS ARE 
REFINED AND MADE MORE ACCURATE 


EFFECTIVE 

- ANALYSIS CAN BE QUICKLY AND INEXPENSIVELY PER¬ 
FORMED, WHILE ADEQUATE ACCURRACY IS MAINTAINED 








HOW IS A LIGHTNING INTERACTION ANALYSIS PERFORMED - 


• DEFINE SOURCE (DIRECT STRIKE, RADIATED FIELDS, ETC.), 
AIRCRAFT (707, 7A7, ETC.) AND POSSIBLY SUSCEPTIBLE 
EQUIPMENT (RADAR, NAVIGATIONAL EQUIPMENT, ETC.) 

• OBTAIN RELEVANT EXPERIMENTAL DATA, SUCH AS 

- LIGHTNING TIME BEHAVIOR OR SPECTRUM 

- AIRCRAFT GEOMETRY AND CONSTRUCTION 

- INTERIOR EQUIPMENT AND CABLE LAYOUTS 

- ELECTRICAL PARAMETERS (CABLE SIZE, SHIELDING, 
IMPEDANCE, TERMINATIONS, ETC.) 

- DEVICE UPSET/DAMAGE/FAILURE THRESHOLDS AND 
MECHANISMS 

• MODEL THE INTERCONNECTED SYSTEM OF SOURCE, AIRCRAFT 
AND EQUIPMENT 

• SELECT A MATHEMATICALLY TRACTABLE REALIZATION OF THE 
MODEL 

• CHECK THE MATHEMATICAL MODEL FOR COMPLETENESS AND 
VALIDITY (COMPARE PREDICTIONS WITH KNOWN EXPERIMENTAL 
RESULTS) 

• PREDICT RESPONSES AT THE SELECTED SUSCEPTIBLE EQUIPMENT 

• EXAMINE SENSITIVITY TO PARAMETER VARIATIONS (OPTIONAL 
"SAFETY" measure) 

















AIRCRAFT DETAILS 



Typical elements and cabling associated with the aircraft 
power system. 



bulkheod 


Elementary volumes within the aircraft. 















CABLE DETAILS 


CABIE TYPES 
(TRANSMISSION lines) 


COAXIAI_ 

Triaxial.. 

IIULT! AXIAL 

Twinaxial. 



Open Lines 
• stripline. 


■ MICROSTRIP_- 

■ TWO-WIRE • • 

■ EDGESTR1P 

■ EDGEWIRE • 




■ WIRE OVER GROUND - 




MATHEMATICAL REALIZATION - 

• GENERAL REQUIREMENTS - 

SOURCE X EXTERIOR RESPONSE X PENETRATION X INTERIOR 
RESPONSE X SHIELDING EFFECT = RESPONSE AT "PIN 

• EXTERIOR RESPONSE X PENETRATION X INTERIOR RESPONSE 
MOST DIFFICULT PART 

• POSSIBLE APPROACHES (MAY BE COMBINED WITH TRANSMISSION 
LINE THEORY, BETHE SMALL HOLE THEORY, MULTIPLE RUNS, ETC.) 

- SIMPLE CANONICAL SHAPES 

- MoM THIN WIRE TYPE CODES (EFIE) 

- PATCH CODES (MFIE) 

- FINITE DIFFERENCE TECHNIQUES 
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CONICAL SHAPES 



[side incident on a prolate spheroid. 



ground plane 


crossed with an electrically thick cylinder. 
































Body-of-revolution model of the EC-135 aircraft. Current zones 
ere indicated with dotted lines. 




























FINITE difference F-lll model 



FINITE DIFFERENCE METHOD - 

* BASED ON BRUTE FORCE TIME STEPPING OF MAXWELL'S 
EQUATIONS 

* INCORPORATES ANY MATHEMATICALLY EXPRESSIBLE* SOURCE, 
l.E. I(t) = e'“‘ - e' 6t 

* ACCURATE EXTERIOR RESPONSE PREDICTIONS 

* WITH EXPANSION TECHNIQUE CAN, ALSO, PERFORM INTERIOR 
RESPONSE PREDICTIONS AT REASONABLE COST 

* CAN HANDLE COMPOSITES, AS WELL AS METAL AIRCRAFT 
PANELS 
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DEFINITION OF THE FINITE DIFFERENCE APPROACH 

Finite differencing consists of replacing continuous 
partial derivatives In P.D.£.*s with appropriate finite 
differences. For example: 

3y * 4(y n ) • y n+ , - y„ ; s’y ^ C »(y„)J * y„ + r 2 V * h 

Finite differencing discritizes the P.D.E. and, hence, 
the problem being solved, i.e. 



Finite differencing is, therefore, an approximation 
that in the limit of zero mesh size is exact. 


Finite differencing does not require any special model 
of the problem to facilitate a solution, just the appro¬ 
priate P.D.E. such as: 

1 3T 3e_ 3h. 

Ifl-V^ + QA or (jp - 57") s * 0 ST 

(heat equation) (portion of Maxwell Equations 

for thin scatterer in cylin¬ 
drical coordinates) 
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EVOLUTION OF PRECEEOING FINITE DIFFERENCE APPROACH TO EM 



* The Maxwell Equations 





* Classical Boundary Value Solutions 

• Introduction of Computers/Computer Oriented Numerical Analysis 

* Integral Equation Approaches (EFIE and MFIE) 

• Finite Difference as presently applied to EM coupling 

1) feasibility of application to realistic problems - 
K.S. Lee - "Nun. Sol. of Int. Bound. Val. Prob. Involv¬ 
ing Maxwell's Equas. in Iso. Media"* IEEE Trans¬ 
actions A and P , May,1966. 

2) application In 2D to realistic problem with radiation 
boundary condition - 

D.E. Merewether - "Trans. Currents Induced on a Metallic 

Body of Rev. by an EM Pulse", IEEE Trans¬ 
actions on EMC , May, 1971. 

3) formulation of 3D code with radiation boundary condition - 
R. Holland - "THREDE: A Free-Field EMP Coupling and Scat¬ 
tering Code", Mission Research Corp., AMRC- 
R-95, Sept., 1976. 
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EVOLUTION - 2 



4) application to complex scattering object with com¬ 
parison to experiment - 

K.S. Kunz and K.M. Lee - "A Three-Dim. Flnite-Diff. Solu. 

to the Ext. Response of an Aircraft 
to a Complex Transient EM Environ¬ 
ment: Part 1 -The Method and Its Im¬ 


plementation and Part 2 - Comparison 
of Predictions and Measurements", 
IEEE Transactions on EMC , May, 1978. 

5) expand subvolume in a second run for increased spatial 
and frequency resolution - 

K.S. Kunz and L.T. Simpson - "A Technique for Increasing the 

Resolution of Finite-Difference 


Solutions of the Maxwell Equations", 
IEEE Transaction on EMC 
November, 1981 

6) generalize the 30 code to treat lossy dielectrics - 
R. Holland, L.T. Simpson and K.S. Kunz - 

"Finite-Difference Analysis of EMP Coupling to Lossy 
Dielectric Structures", IEEE Transactions on EMC , 

August, 1980. 


* 
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INCREASED RESOLUTION USING EXPANSION TECHNIQUE 

- a/c unexpanded - 



PlflMP* 7. Eihdm Run Shewing CoeRelt Are* Oettll. 






















DIELECTRIC CAPABILITIES 




































INTERIOR COUPLING APPROACH 
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PIN PREDICTIONS - SINGLE MULTILAYERED CABLE 




• USE F.D, TO FIND CURRENTS ALONG CABLE SHEATH,I b 

• USE SURFACE TRANSFER IMPEDANCE,, lj> AS DEFINED BY 
SCHELKUNOFF, TO FIND THE INTERIOR CURRENTS: 

Ia(x) - (X,X # ) ' Zj * Ib(x')dx' 

WHERE G n IS THE APPROPRIATE GREEN'S FUNCTION THAT 
INCORPORATES THE CORRECT BOUNDARY CONDITIONS FOR 
THE GEOMETRY AT HAND 

’ EVALUATE I a (X * L) TO FIND THE CURRENT AT THE PIN 

• EVALUATE THE VOLTAGE ACROSS THE DEVICE CONNECTED TO THE 
PIN, Vd, USING THE PIN CURRENT AND THE DEVICE'S IMPEDENCE 
Zd, I.E. Vd * Ia(X * L)Zd, 


*ONLY DIFFUSION THROUGH SHIELD CONSIDERED 
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EXPECTED RESULTS - 


EXTERIOR RESPONSE - SIMILAR TO PERFECTLY CONDUCTING 

A/C RESPONSES 


INTERIOR CABLE RESPONSE, WIRE EXTERIOR - WEAKLY 

DAMPED SINUSOID, SEE BELOW 


• PIN RESPONSE - SIMILAR TO WIRE EXTERIOR 
































SUMMARY 


FEATURES 


° Any fuselage exterior geometry can be modeled. Including: 

- composites 

- conducting panels 

- mix of composite and metal 

° Various coupling pathways can be modeled, including: 

• diffusion through composite panels 

- seams around panels 

- small apertures around doors/hatches/wheel wells, etc. 

• large apertures such as windows 

° Detailed interior geometries can be treated, including: 

- individual wires with various terminations 

- surrounding "fill" 

- adjacent wires to within a cell size (-0.05m or -2" at best) 
° Fast risetime {'•30-50ns) pulses can be easily incorporated 

° Non-linear effects can be modeled 

' - attachment points can be selected based on experience, while 

detachment points can be selected based on fields exceeding 
preset thresholds 

- interior arcing can be modeled similarly 




r 


AREAS OF APPLICATION 


0 Exterior I and V response predictions as a function of: 

- position 

-AC construction (metal or composite or mix) 

- excitation source 

- attachment/detachment location 

° Interior Responses 

- interior field levels 

- wire currents 

- transfer functions 

0 Hazard Assessment 

- induced current damage 

- field induced upset 

- fuel ignition from arcing 

0 Protection Measures Evaluation 

- field/charge and current penetration reduction 
(from covered seams* mesh across windows, etc.) 

- arc suppression 

(from cable rerouting. Interior geometry changes, etc.) 

- protective device effects 

(depends on "threat" spectrum, device location, device 
operations, etc.) 
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INTERMITTENT/TRANSIENT FAULTS IN DIGITAL COMPUTERS 


by 


Dr. Gerald M. Masson 


Johns Hopkins University 


Need and objectives of digital system upset assessment 
methodology: The definition of upset. Description of 
approach being developed for assessing upset potential 
of digital systems. Upset model types and importance of 
burst error models; dominant importance of program transi¬ 
tion models. Definition and use of system state probability 
transition matrix in upset analyses. Example of upset 
tolerant microcontroller. 
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FAULTS 

- PERMANENT 

- INTERMITTENT 

- TRANSIENT 

- I/T 
MODELS 

- STUCK-AT 
TESTS 

- DETECTION 

- LOCATION' 


• DUPLEX SYSTEMS 

- ROLLBACK 

• TMR SYSTEMS 

- ROLLAHEAD 

• DIAGNOSABLE SYSTEMS 

- INTELLIGENT UNITS 


* HARDWARE 

- CENTRAL PROCESSING UNIT (CPU) 

- READ-ONLY MEMORY (ROM) 

- READ/WRITE MEMORY (RAM) 

- INPUT/OUTPUT DEVICES (I/O) 

- SUPPORT LOGIC 

* SOFTWARE 

- LOOKUP TABLES 

- CHARACTERIZATION 

I. INPUT- SENSORS SCANNED 

II. DATA PROCESSING 

III. CONTROL SIGNALS TO ACTUATORS 


* CPU TESTING 

* RECOVERY STRATEGIES 

- DUPLICATION 

- TMR 

- WATCHDOG TIMER 


watchdog timer 


I 




X 


RESET 

INPUT 

-T2—• 


FIGURE I. WATCHDOG TIMER 












CONTROL SYSTEM CONSIDERED ALONE 






























# CONTROL SYSTEM INTERACTS WITH ENVIRONMENT 

* INTERMITTENT/TRANSIENT FAULTS 

- SYSTEM "TRANSIENT" RESPONSE 

- SYSTEM "STEADY STATE" RESPONSE 



FIGURE 5. CONTROL SYSTEM SITUATED IN HOSTILE ENVIRONMENT 














FAULTS, ERRORS. AND UPSETS 

• FAILURES 

- CIRCUIT LEVEL 

- ANALOG NATURE 

* FAULTS 

- LOGICAL LEVEL 

- DIGITAL NATURE 

- LOGICAL DIFFERENCE AT FAULT SITE 

• ERRORS 

- LOGICAL LEVEL 

- DIGITAL NATURE 

- DUE TO PROPAGATION OF FAULTS 

- LOSS OF SYNCHRONIZATION PROBLEM 

NEW DEFINITION 

* UPSETS 

- SYSTEM LEVEL 

- FUNCTIONAL NATURE 

- TRANSFER FUNCTION 


CONTAINMENT SETS 

* A FINITE SET OF MUTUALLY EXCLUSIVE FUNCTIONAL STATES 

* COVERS ALL POSSIBLE SYSTEM TRANSFER FUNCTIONS 

* INCLUDES 

- VALID STATES 

- ERRONEOUS STATES 
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TRANSITION MATRIX: 


T-ip ±j ] , WHERE P Aj IS THE PROBABILITY OF A TRANSITION 
FROM STATE j TO STATE i , GIVEN THAT AN ERROR HAS OCCURRED 


L (K+l) = T L(K) , L(K) 



p ± (k) IS THE PROBABILITY OF BEING IN CONTAINMENT STATE 
L iE {L} AFTER k UPSETS 


AFTER k UPSETS, 

L (K) » T K L(O) 


FAULT ANALYSIS AND SYSTEM VALUATION 


SINGLE UPSET ENVIRONMENT 


- P OF T 
n 


id 


OF MAJOR CONCERN 


* MULTIPLE UPSET ENVIRONMENT 

- P OF T K FOR URGE K OF MAJOR CONCERN 
11 


* EXAMPLE 

7/8 1/8 

1/8 7/8 


LIM (T*) k = 

15/19 

15/19 

LIM (T**) K - 

1/2 

1/2 

K-* • 

4/19 

4/19 

■ 

, K--» 

1/2 

1/2 


T # = 


3/4 

15/16 

1/4 

1/16 


T*. 
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A T * 



1/8 


FIGURE 6. TWO 2-LOOP IMPLEMENTATIONS 



* CONTAINMENT SET AND TRANSITION MATRIX ANALYSIS PROVIDES FEEDBACK 

TO IMPROVE DESIGNS 

* REMOVAL OF ERRONEOUS ELEMENTS FROM THE CONTAINMENT SET 

AUTOMATICALLY PROVIDES FAULT TOLERANCE 
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in: i m i ; i ; [ a :i m ■ a«] 1 m ;^i*j m vwfl m 


• PROGRAM TYPES 

- EXITING 

- LOOPING 

* TAKE THE CONTAINMENT SET TO CONSIST OF ALL POSSIBLE LOOP PROGRAMS 

- INCLUDES VALID LOOPS 

- INCLUDES ERRONEOUS LOOPS 


GIVEN THE EXECUTION OF LOOP PROGRAM l. e {l> , upsets can 
BE CHARACTERIZED AS: 

(1) DATA CHANGE - 

DATA VALUES ARE MODIFIED, BUT EXECUTION 
REMAINS IN 

(2) PROGRAM BUMP - 

EXECUTION TEMPORARILY DIVERGES FROM l ± BUT 
EVENTUALLY RETURNS TO \ 

(3) PROGRAM TRANSITION -- 

EXECUTION JUMPS FROM l a to l. , ^ t l. 

PROGRAM TRANSITION = STEADY STATE OPERATIONAL DEVIATION 
TRANSITION INTO INVALID EMBEDDED LOOP = SYSTEM CRASH 
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ADDRESS 

CONTENTS 

NORflAL EXECUTION 

N 

OP-CODE 

ERRONEOUS EXECUTION 

N+l 

DATA 


NORflAL EXECUTION 

N 

OP-CODE 

ERRONEOUS EXECUTION 

N+l 

DATA 0 

ERRONEOUS EXECUTION 

N+2 

DATA 1 


ERRONEOUS EXECUTION N DATA TABLE 

ERRONEOUS EXECUTION N+l DATA TABLE 


FIGURE 7. ERRONEOUS LOOP INSTRUCTION EXECUTION * 


Result 

Addr 

Pete 

LO Code 

L1_ Code 

L2 Code 

Other 

LO 

e 

0000 

e 

00 

e 




NOP 

e 

e 

LO 

e 

00C9 

e 

00 




e 

NOP 

LO 

OOCA 

3E 

p>HVI A,0C3H 




Li 

OOCB 

C3 


r>JMP 0D3H 



LO 

oocc 

03 

OUT 0 





LO 

OOCD 

00 





NOP 

LO 

OOCB 

22 

LXI H.0CFC3H 





L2 

OOCF 

C3 




r->JMP OCFH 


LO 

OODO 

CF 




1 

R8T 1 

LO 

00D1 

00 

NOP 





LO 

0002 

32 

8TA 0CBC3H 

\ 

7 

* 


Li 

0003 

C3 


JMP 

OCBH 



LO 

0004 

CB 


1 


RSTV 

LO 

0005 

00 

NOP 

- 1 



LO 

0006 

C3 

JNP OCAH 




LO 

0007 

CA 

1 



J* 0 

LO 

0008 

00 




NOP 

LO 

e 

0009 

e 

00 

e 




NOP 

e 

e 

LO 

e 

OOFE 

e 

00 




e 

NOP 

LO 

oorr 

C7 




AST 0 


Figure I. An Erroneous Loop Exsaple for the 8085 
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FIGURE 9. CONTROLLER WITH CONTAINMENT HARDWARE 


# HARDWARE 

- CLOCK STOP 

- HALT 

- READY 

- HOLD 

- INTERRUPTS 


PROGRAM PATH DIVERTERS 
* SOFTWARE 

- JUMP CATEGORY INSTRUCTIONS 

- CALL CATEGORY INSTRUCTIONS 

- RETURN CATEGORY INSTRUCTIONS 
(+ EFFECTS OF 'UNDEFINED' 

INSTRUCTIONS) 


? 


** A PROGRAM STRUCTURAL ANALYSIS IS MADE BASED ON PATH DIVERTERS •• 
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Trn.: 




m 

U2 

Hi 

m 


KOI 4 — 

BODY 4— 

BODY 4— 

BODY v—i 

LOOP 

LUt> S P 

n sf 

DO SP 

CALL X 

TVPt 

BODY 

BODY 

BODY 



teim 


OCX SP 

X. BODY 


i- 

1- 

BODY 

torn 




BfTUM 


STWCTUtt 

LOAD $P 

PUSH 

OCX SP 

CALL X 

TYPt 

BODY 

BODY 

BODY 



RtTUBM 

KTUtM 

kt m 

X, BODY 


term 


TW II IMP 

CAU X 

X; BODY 

I_ 


tv* in i«» 

JWX4- 

X: BODY 

I_ 


wnviw 

AMES; 0000 4—i 
MOKSS 0001 


MMLSS FFFF 


FIGURE 10. LOOP STRUCTURES 


FAULT TQlXRAMIJaNTRQUILJESmJlULES 

• HARDWARE 

- CONTINUOUS CLOCK 

- UNCONDITIONAL INSTRUCTION EXECUTION 
(OP-CODE FETCH DETECTION) 

- BAD FETCH DETECTOR 
(ROM RESTRICT MECHANISM) 

- OPTIONAL SAFE ROM 

- REQUIRES 2-3 INTEGRATED CIRCUITS 
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TABLE I 


Crash-Proof Software Design Rules Summary 


1. Program execution from RAM is prohibited. 

2. Exit from temporary loops must be guaranteed. 

3. Stable loops must include a call to a check subroutine, which guarantees all 
assumptions the program requires for continued execution. (These include 

ASSUMPTIONS ON 1/0, INTERRUPTS, AND VARIABLES.) 

4. Return from all possible interrupts must be guaranteed. 

5. Subroutines cannot call themselves. 

6. Subroutines cannot modify the stack pointer or the return address. 

7. Within subroutines, memory store instructions which permit a variable store 

ADDRESS MUST GUARANTEE THAT THE RE6ISTER USED AS THE ADDRESS POINTER CANNOT 
POINT TO THE STACK SPACE. 

8. Instead of using RET or RCN instructions, a JMP or JCN to a special return 

ROUTINE WHICH GUARANTEES THAT THE STACK POINTER POINTS WITHIN THE STACK SPACE 
BEFORE RETURNING MUST BE USED. (THE RETURN ROUTINE CONTAINS THE ONLY RET 
INSTRUCTION IN THE ENTIRE PROGRAM.) 

9. A STACK WALL must be added. (Leave unused ROM space as 00 or FF.) 

10. The PCHL instruction cannot be used. 

11. Either a SAFE ROM must be used, or all erroneous loops and erroneous calls 
to addresses which, when considered to be subroutines, do not SATISFY EITHER 
Rule 5, 6, 7, or 8 must be removed. 
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Min T Tfll FRANT CONTROLLER TEST SYSTEM 

* NOISY POWER SUPPLY TEST SOURCE 

* DUAL LED CONTROLLERS 

* UNMODIFIED SOFTWARE 

- LED 1.1 

- LED A.6 

* CRASH-PROOF SOFTWARE 

- LED 2,2 

- LED 3.3 

- LED 3.A 

- LED 5.2 

- OVERHEAD 

LED 2.2/LED 1.1 - 8.5 X 
LED 5.2/LED A.6 - 1A X 
LED 3.3/LED 2.2 - 35 X 
LED 3.3/LED 1.1 - A7 X 

SOFTWARE TOOLS 

* DESIGN AIDS FOR FAULT TOLERANCE IMPLEMENTATION 

* INTERACTIVE USE PROVIDES EFFECTIVE AND EFFICIENT DESIGN 

* SAFE 

- PRODUCES SAFE ROM CONTENTS FROM SOURCE CODE 
* OUTPUT USED AS INPUT TO LOOP 

* LOOP 

- LOCATES BANNED PROGRAM STRUCTURES 

- LOCATES ERRONEOUS LOOPS 

- PROVIDES CHECK ON INTENTIONAL LOOPS 
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LOOP ANALYSIS OP LCD 1.1, FACS 1 


£o$°seklcJ*V B ' J LED1 ‘ 1 * SAF£ 

ONLY VALID (V,v) OR CRRONGOUS CE,r) ? E 

LOOP: ERRONEOUS 

OOFB F*5 PSH PSW 

OOFC 00 NOP 

OOFD C3 P3 00 JMP 00F3 

00F3 OS DGR B 

00F4 C8 RZ 

LOOP SEARCH? N 
LIST CALLS? Y 

ONLY VALID (V^v) OR ERRONEOUS CE,r> ? E 


CM 

FB07 

tl/O) 

CM 

FEOF 

[I/O] 


LOOP: ERRONEOUS 

0395 FC OF FE CM FEOF [I/O] 

LOOP SEARCH? N 

LIST CALLS? N 

LIST MEMORY STORES? Y 

ONLY VALID (V,v> OR ERRONEOUS (E,t) ? V 
LOOP: VALID 

006A 77 MOV M*A 


LOOP: VALID 
OOAC 34 

LOOP: VALID 
00F:3 36 00 


INR M 


00F:3 36 00 MV1 M> 00 

*** MAIN AND SWTCH SET AS ERRONEOUS *** 

X LOOP LEDl.l.OBJ LCD1.1.SAFE 
LOOP SEARCH? Y 

ONLY VALID (V,v> OR ERRONEOUS CE,r> ? V 
LOOP: VALID 

009D CD E» 01 CALL 01EB 

GOAD OD DCR C 

OOAl CP 9D 00 JNZ 009D 


LOOP: VALID 
OOFS. 05 
00F4 C8 
OOFS P3 
00F6 7E 
00F7 P3 
00F8 FE FO 
OOFA CP F5 00 
OOFD C3 F3 00 

LOOP: VALID 
OOFS 23 
00F6 7E 
00F7 23 
OOFB FE FO 
OOFA C2 F5 00 

LOOP: VALID 
00F3 OS 
OOFA C8 


DCR E: 

RZ 

I NX H 
MOV A*M 
I NX H 
CPI FO 
JN7 OOFS 
JMP 00F3 


I NX H 
MOV A,M 
I NX H 
CPI FO 
JNZ OOFS 


DCR 8 
RZ 

H 




TABLE II 



led 4.6 039A 922 * Functional 









DIAGNOSABLE SYSTEMS 
THEORY EXPANSION 









A MICROPROCESSOR-BASED UPSET TEST METHOD 


by 


Ms. Celeste M. Belcastro 


Langley Research Center 
National Aeronautics and Space Administration 


Description of a microprocessor-based upset testing 
method employing transient waveforms randomly injected 
into a digital unit. Upset test data presented along 
with preliminary observations. 
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OUTLINE 


• BACKGROUND 

• RESEARCH OBJECTIVES OF UPSET TESTING 

l 

• ; UPSET TEST DESIGN CRITERIA 

• UPSET TEST HARDWARE IMPLEMENTATION 

• PRELIMINARY OBSERVATIONS 
0 FUTURE PLANS 


EflQmamysEP b y i i^iitninc. 
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f SYSTEM AND SUBSYSTEM ASSESSMENT - 

i * • . 

CABLE EXCITATION 

i 

• CHANGING MAGNETIC FIELD IN A COUPLING TRANSFORMER 
* • 

• TRANSVERSE ELECTROMAGNETIC WAVES GENERATED ON 
PARALLEL-PLATE TRANSMISSION LINES 

I INDIVIDUAL UNIT ASSESSMENT - 

INTERFACE CIRCUIT INJECTION 

• DIRECT APPLICATION OF TRANSIENT WAVEFORMS TO PIN CONNECTIONS, 

RESEARCH OBJECTIVES 


6 SHORT RANGE 

I 

| DEVELOP A METHODOLOGY TO TEST A DIGITAL 
SYSTEM FOR UPSETS 


I LONG RANGE 

I CHARACTERIZE UPSET PHENOMENA ' 

• DEVELOP DIGITAL FAULT SIGNATURES THAT 
MODEL UPSETS 

' - DIAGNOSTIC EMULATION 

- UP8ET VULNERABILITY ASSESSMENT 
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UPSET TEST CRITERIA 


• CHOOSE A CANDIDATE PROCESSOR/CONTROLLER 

• INJECT TRANSIENT SIGNALS RANDOMLY 

• ENHANCE SIMULATION 

• AVOID SYNCHRONIZATION 


• IDENTIFY PROCESSOR'S INTERNAL STATE WHEN INJECTION OCCURS 

' • DETERMINE IF UPSET OCCURS INDEPENDENTLY 

OF PROCESSING STATE 


• VARY THE TRANSIENT SIGNAL INJECTION POINT 

• DETERMINE IF UPSET SUSCEPTIBILITY 
IS UNIFORM THROUGHOUT THE 
PROCESSING SYSTEM 

• OBTAIN BIT PATTERNS 

• DEVELOP FAULT SIGNATURES 


CANDIDATE PROCESSOR/CONTROLLER 


INTEL fiP UNIT - 
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PROGRAMMER 

1 

8080 INSTRUCTION SET 
(2M INSTRUCTIONS) 

I 

, PROGRAM 
' • 1 

OPERATION CODE (OP-CODE) 

1 . 

8080 

I 

INSTRUCTION CYCLES 

\ 

MACHINE CYCLES (IDENTIFIED BY STATUS BITS) 

\ 

STATES 

I 

CLOCK CYCLES (0 2 ) 


TYPE OF MACHINE 

CM 

MICROPROCESSOR MACHINE CYC1ES 

STATUS BITS 

SZ S5 SI S*L SI S2 SI 

so 

> 

NOMLCLOOLCYCLES 

INSTRUCTION FETCH 

1 

0 

1 

0 

0 

0 

]. 

0 

•'1 OR !> 

MEMORY READ 

1 

o. 

0 

0 

0 

0 

1 

0 

3 

MEMORY WRITE 

0 

0 

0 

0 

0 

0 

0 

0 

3 OR H 

STACK READ 

1 

0 

0 

0 

0 

1 

1 

0 

3 

STACK WRITE 

0 

0 

0 

0 

0 

1 

0 

0 

3 

INPUT 

0 

1 

0 

0 

0 

0 

1 

0 

3 

OUTPUT 

0 

0 

0 

1 

0 

p 

0 

0 

3 

INIERRUPT 

0 

0 

1 

0 

0 

0 

1 

1 

5 

HALT 

1 

0 

0 

0 

1 

0 

1 

0 

3x 

INTERRUPT WHILE HALT 

0 

0 

1 

0 

1 

0 

1 

1 

5 









UPSET TEST CONFIGURATION 



TELETYPE I/O 


LIGHTNING INDUCED EFFECTS WAVEFORMS 


• DAMPED SINUSOID 


• DECAYING EXPONENTIAL 
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Amplitude decreases* 
25-50X in 4 cycles 


R - 68 n 

R * 47 0 

l - 196 nH 

L ■ 13.5 pH 

C - 129 pF 

C - 18.7 pF 


500 max 170 (TO;) 

100 max 2 ( 20 *) 


•n 


tj = 170 |is 

R = 1.0 Ml 
C » 0.0068 i.F 


, :'LlA" s . 

!■ 1.1 i:h 

L - 4/0 i.l 




























PRELIMINARY OBSERVATIONS 


• UPSET HAS BEEN INDUCED AND OBSERVED IN THE LABORATORY 

• UPSET DOES NOT OCCUR AFTER EACH TRANSIENT 8IONAL INJECTION 
-I IMPLIES CORRELATION BETWEEN UP8ET AND PROCE83INC 8TATE 

• NORMAL FUNCTION IS RESTORED BY RESETTING AND/OR 
REPROGRAMMING THE SYSTEM 

0 STATUS BIT SEQUENCES HAVE BEEN RECORDED THAT DO NOT 

i 

CORRESPOND TO AN 8080 MACHINE CYCLE 

• I 

■ , < , • « 

•- IMPLIE8 UNDEFINED PROCESSING' STATES BEING ENTERED 

FUTURE PLANS 


a COMPLETE THE FOLLOWING UPSET TEST MATRIX 


pin i ivel- 


WAVU OHM 1 


DATA HUS I.IMER 

pP CHIP 

X 

WAVEFORM 2 

X 

ADDRESS RUG l INrS 

CONNECT on 


WAVI:FOR„A 3 


coNinni lines 

t Evn- 





cpu CAno 


WAVEFORM 4 


I/O LINES 


• PERFORM A STATISTICAL ANALYSIS OF THE TIME 
DATA TO RELATE UPSET TO 

i 

• internal state of the candidate processor 

• TRANSIENT SIGNAL INJECTION POINT 


• UTILIZE A SOFTWARE SIMULATION APPROACH TO DEVELOP 
FAULT SIGNATURES FROM THE STATUS BYTE DATA 




DIAGNOSTIC EMULATION ANALYSIS—NEED AND TECHNIQUE 


by 


Mr. Gerard E. Migneault 


Langley Research Center 
National Aeronautics and Space Administrat ion 


A brief description of the problem of determining failure 
modes will clarify the usefulness of emulation. The dis¬ 
cussion will cover the relationship of complexity, defini¬ 
tional flaws, specific software dependent behavior and 
lumped parameter analytical models. Deterministic and 
stochastic application possibilities of emulation will be 
identified, as will implementation details — at the 
level of a conceptual scheme and in terms of supporting 
components. A sample application will be described. 

Future possible directions will be identified. 
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CHARACTERISTICS OF FAULT TOLERANCE 


• REDUNDANCY 

• ERROR DETECTION 

t CONTINUED OPERATION 
-- RECOVERY 

••• INCREASED COMPLEXITY 



• SAFETY REQUIREMENT IMPLIES PROBABILITY OF SYSTEM FAILURE 
IN 10-HOUR FLIGHT LESS THAN ABOUT 10" 9 


• FAULT INTOLERANT SYSTEM 
WORST COMPONENT/DEVICE 
MTTF - 10 10 HOURS 

NOT FEASIBLE TODAY 


• SYSTEM MUST TOLERATE FAULTS AND BE MAINTAINED 
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)B FAIL 



N 

SYSTEM MTTF _ v aN-i 
DEVICE MTTF : 

j=R 


i 

a o'T , an = J ^ C k 
k«1 
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MAINTAINED FAULT TOLERANT SYSTEM 



• MTTF • + /3 - « 

MAINT A 


~ TO tO HOURS 


•MTTR 


EPAIR 


DEVICE MTTF 
No. OF DEVICES 


• ECONOMICS-►MULTIFUNCTION DEVICES 

• MORE COMPLEXITY 


A=/ o «(» 
ft * / " «l 

J o 


TOLERANCE OF DEFINITIONAL FLAWS SOFTWARE PRIME CULPRIT 




* 


( 


0 


<> 


NX 


1—k 


SYSTEM FAIURE 


D 


C 


1—k 


SYSTEM FAILURE 


3 


TOLERANCE OF DEFINITIONAL FLAWS 


SOFTWARE PRIME CULPRIT 









SYSTEM FAILURE 









OBJECTIVE 

DEVELOPMENT AND SPECIFICATION OF AN EMULATION TECHNIQUE FOR GENERATING 
STATISTICALLY SIGNIFICANT QUANTITIES OF FAILURE MODES EFFECTS DATA OF 
HIGHLY RELIABLE COMPUTER SYSTEMS 

JUSTIFICATION 

• IN HIGHLY RELIABLE, FAULT TOLERANT SYSTEMS SYSTEM FAILURE MODES DUE 
TO DESIGN FLAWS BECOME SIGNIFICANT - PERHAPS DOMINANT 

• CREDIBILITY OF'ANALYTICAL RELIABILITY MODELS IS DEPENDENT UPON AMOUNT 
OF DATA FROM WHICH INPUT PARAMETERS ARE-DERIVED 

• HIGH RELIABILITY (10**) OF SYSTEMS BEING ANALYZED PRECLUDES USE/LIFETIME 
TESTING OF ACTUAL SYSTEMS BECAUSE OF INORDINATELY LONG MTTF's 

• NO OTHER MEANS IDENTIFIED TO ACQUIRE SUFFICIENT DATA FOR THE ABOVE. 


TECHNICAL APPROACH 

• DEVELOPMENT OF FAST EMULATION ALGORITHMS CAPABLE OF SUPPORTING 
■ FAULT INSERTION * 

- GATE LOGIC LEVEL 

- HYBRID LEVELS 

GATE/CHIP/REGISTER/INSTRUCTION COMBINATIONS 

• IMPLEMENTATION OF ALGORITHMS IN A HORIZONTALLY MICROPROGRAMMABLE 
COMPUTER AS AN ALGORITHM TEST BED WITH OPERATIONS SYSTEMS 

• DEVELOPMENT AND SPECIFICATION OF NEEDED SUPPORT CAPABILITIES 

- META COHPILERS/ASSEMBLERS 

- DATA RECORDING CAPABILITIES 
. - RUN TIME CONTROL FUNCTIONS 

- FAULT TABLE GENERATORS 

- H/W DESCRIPTION TRANSLATOR 

- ENVIRONMENT SIMULATOR/INTERFACING 

- DATA POST PROCESSORS 
• OPERATOR GRAPHICS 
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-►( PROCESS 



04W 

& 


a n . 

..XV... 

0 0 

0 0 111 

O 0 

1 0 1 

0 0 

0 1 1 

1 1 

0 0 


Now 

State 


Prior 

State 


CONCEPTUAL EMULATION SCHEME 











0 00110000000 

V 00000011 000 

5 00001100000 

r 00000000110 

S 00 000000001 



# OF CORRECT CYCLES BEFORE ERRONEOUS DATA GENERATED 











DIAGNOSTIC EMULATION APPLICATIONS 


DETERMINISTIC! 

• HARDWARE LOGIC DESIGN ANALYSIS. 

• SOFTWARE DESIGN ANALYSIS. 

• SYSTEM (H/W & S/W) EFFICIENCY/MISMATCH ANALYSIS. 

I H/W/S/W/SYSTEM FAILURE MODES & EFFECTS ANALYSIS 

I SYSTEM PERFORMANCE ANALYSIS IN A SIMULATED MISSION 


DIAGNOSTIC EMULATION APPLICATIONS 


STATISTICAL: 

I LATENT FAULT ANALYSIS AND MODELING. 

• COVERAGE DETERMINATION AND MODELING. 

• TRANSIENT FAULT ANALYSIS. 
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DIGITAL SYSTEM HARDWARE DESCRIPTION TECHNIQUE USED IN EMULATION 


by 

Mr. Robert M. Thomas, Jr. 


Langley Research Center 
National Aeronautics and Space Administration 


A technique to translate a digital circuit description 
into the form required to emulate the circuit at the gate 
and flip-flop level is described. This technique, imple¬ 
mented as computer programs, takes as input a description 
of the integrated circuit and translates the description 
into tables for the emulation. Integrated circuit descrip¬ 
tion language is described. 
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FAULT 

GENERATOR 



OUTLINE 

• HARDWARE DESCRIPTION LANGUAGE 

• TRANSLATION 

• FAULT GENERATION AND INSERTION 













HARDWARE DESCRIPTION LANGUAGE 


SYS 11 MAI IC Rill IS I OR IXPRISSING IIARHWARI IOl.ll 
IN A FORM USABLE BY THE TRANSLATOR. 

SOURCE OF INFORMATION 

SCHEMATICS 

- INTEGRATED CIRCUIT TYPES 

- INTERCONNECTIONS 

- NAMES OF EACH IC 

INTEGRATED CIRCUIT DATA SHEETS 

- GATE/FLIP-FLOP MODELS 

HARDWARE DESCRIPTION LANGUAGE 

LANGUAGE ELEMENTS 

GATE TYPES.- AND, OR, NOT, NAND, NOR, EXCLUSIVE OR, 

EXCLUSIVE NOR 

FLIP-FLOP TYPES: D, J-K, R-S, T 

INTEGRATED CIRCUIT 
IDENTIFIERS: ALPHA-NUMERIC 


INTEGRATED CIRCUIT 
CONNECTIONS: PIN TO PIN 
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CHIP DESCRIPTION 


$ CHIP DEFINITION $ 

TYPE ! 

POWER ! 

DESCRIPTION ! 

UNUSED PINS ! 

FUNCTIONS ! 

G-S = 

G-A = 

G-R = 

G-C = 

G-A' = 

G-B' = 

G-C' = 

G-D 0 = 

G-D ) = 

G-D 2 = 

G-D 3 = 

G-D 4 = 

G-D 5 = 

G-D 6 = 

G-D 7 = 

G-W (P-6) = 

G-Y (P-5) = 

END CHIP $ 


LATCHED PARALLEL TO SERIAL CONVERTER SCHEMATIC 









CHIP DESCRIPTION FOR 74LS151 


t CHIP DEFINITION * 

TYPE : SN54LS151 

POWER s VCC = P-16.’ GHD - P-8 

DESCRIPTION : ONE OF EIGHT DATA SELECTORS MULTIPLEXERS. 
UNUSED PINS s NONE I 

FUNCTIONS « 

G-S = NOT CP-?> 

G-R = AND <P-11> I 

G-B * RMD<P-10) 

G-C = AND(P-8> 

6-A = NOT <G-A> 

G-B * NOTvGrB' 

G-C' = NOT <G-C> 

G-DO * RND<G-S» P-4. G-R « G-B'. G-C') 

G-Dl - RNDCGrS. P-3. G-R. G-B'. G-C') 

6-D2 - AND<G|-S» P-2. G-fl'» G-B. G-C ) 

G-D3 * RND<G-S. P-1. G-R. G-B. G-C) 

G-D4 - RND<G-S. P-15. G-R'. G-B'. G-C) 

G-D5 - AND<GLs» P-14. G-R. G-B'. G-C) 1 

G-D6 * RNOCG-S. P-13. G-R . G-B. G-C) 

G-D? - AND<G-S> P-12. G-fi. G-B. G-C) 

G-W<P-6) « NOR<G-DO»6-D1.G-D2.G-D3.G-D4.G-D5.G-D6.G-D?) 
G-Y <P-5> ■ NOT <.G-W> 

% END CHIP % 








INTEGRATED CIRCUIT NAME TABLE 


OUTPUT 

IC 1-2 
IC 1-5 
IC 1-6 
IC 1-9 
IC 1-12 
IC 1-15 
IC 1-16 
IC 1-19 
IC 2-5 
IC 3-14 
IC 3-13 
IC 3-12 


NAME 

K.JYPE 

IC 1 

74LS273 

IC 2 

74LS151 

IC 3 

74LS169 


INTEGRATED CIRCUIT CONNECTION TABLE 


DESTINATION 

IC 2-4 
IC 2-3 
IC 2-2 
IC 2-15 
IC 2-14 
IC 2-13 
IC 2-12 

OUTPUT CONNECTOR 
IC 2-11 
IC 2-10 
IC 2-9 


SIGNAL NAME 
(OPTIONAL) 


SERIAL DATA 


236 





TRANSLATION PROCESS 




CIRCUIT 
DESCRIPTION 


TRANSLATOR 





EMULATION 
MATRIX 


TRANSLATION PROCESS 


CONVERT A PSEUDO ENGLISH CIRCUIT DESCRIPTION TO A 
PACKED BINARY ENCODED FORM REQUIRED BY THE EMULATION 
ALGORITHM 


REJECT DESCRIPTION THAT DOES NOT FOLLOW PRECISELY 
THE HARDWARE DESCRIPTION LANGUAGE RULES 
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FAULT GENERATION AND INSERTION 


FAULT SELECTION 

- MANUAL - SELECTED BY EXPERIMENTER 

- AUTOMATIC - RANDOMLY SELECTED 

FAULT INSERTION 

- MODIFY EMULATION MATRIX TO REFLECT 
FAULT 

FAULT OCCURRENCE 

- INFORMATION TO EMULATION ALGORITHM 
AS TO WHEN FAULT OCCURS 


SUMMARY 

DEVELOPING THE TOOLS TO SUPPORT GATE/FLIP-FLOP LEVEL 
EMULATION OF DIGITAL COMPUTERS 

- HARDWARE DESCRIPTION LANGUAGE 

- TRANSLATOR PROGRAM 

- FAULT GENERATOR PROGRAMS 
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THE NEED FOR TRANSIENT DATA IN A 
CARE III RELIABILITY ANALYSIS 


by 


Mr. Salvatore J. Bavuso 


Langley Research Center 
National Aeronautics and Space Administration 


The recently developed CARE III (Computer-Aided Reli¬ 
ability Estimation) computer program incorporates a 
transient/intermittent fault model that is mathematically 
accurate in contrast to many existing reliability evaluator 
programs which employ approximations for the transient/ 
intermittent model. The CARE III transient/intermittent 
model will be discussed and compared to existing approxi¬ 
mating models. Computational complexity arising from the 
use of the CARE HI transient/intermittent model will also 
be addressed. 




/ 


OBJECTIVE: 


So * Xi x 2 Xj 

(All channel* 
operational) 


ADVANCED RELIABILITY ASSESSMENT TECHNIQUES 


DEVELOP A CAPABILITY TO ASSESS THE RELIABILITY OF ANY 
FAULT-TOLERANT COMPUTER-BASED SYSTEM, INCLUDING 
EXECUTIVE SOFTWARE 


Interprocessor bus 



Triplex computer architecture. 


Sl ' *1 *2 *3 * X 1 X? X 3 * Xj Xj Xj 
(Two out of three channels operational) 



(Systea failure) 

Markov state space model of triplex channel RCS. 
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P 0 (t ♦ At) - P 0 (t) - SACjAtPgtt) - 3A(1 - C,)AtP 0 (t) 


lira 

At-0 


P 0 (,.«>-P 0 (0 

-_ ■ gj "■'o' 1 ' 


dp n (o 

-g--3XP 0 (t> 

dP.(t) 

-A- - 3xCjP 0 (t) - ixPj(t) 

toCjP^D - xpjd) 

dp.(t) 

- SX(1 - C^PqW ♦ 2x(l - CjJPjW + xp 2 (t) 

•where Pg Is the probability oi the system being in state Sg, that Is 

P 0- P ( S 0) P l- p ( S i) P 2- r ( S ^ I> 3- P ^ 

and the initial conditions are 

P 0 (0) - 1 • ?j(0) - P«(0) - P 3 (C) - 0 


p 0 W - 8-3x1 

Pj(t) » SC^e* 2 * 1 - e- 3u ) 

P 2 (t) - 3 C x C 2 ,Je~ At - 2e' 2xt ♦e‘ 3xt ) 
P 3 (t) - 1 - [P 0 U, ♦ PjW ♦ P 2 (tj] 
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CMS. DELETE R/A AND ILS 


- Near-Term ARCS Dependency Tree 
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Delineation of hardware and software anomalies 










NUMBER OF STATES NFFDF.Pi FOR A MARKOV MODEL 


LET: n - NUMBER OF "COUPLED* STAGES 

ItjL — NUMBER OF POSSIBLE FAULT TYPES IN lTH STAGE 
i 1 - NUMBER OF POSSIBLE FAULT STATES/TYPt IN f TH STAGE 

.. •« .••• •••.! ■ M *• • H • 1 •* 1 i 1 " 

m j _- NUMBER OF MODULE FAILURES THAT CAN BE TOLERATED 
IN THE lTH STAGE 

Then number of ststem states N is 

-,uir;-)] 

B.g., If n - 4 and k t • 2, » t • 3, • 3 *<* aU 1, M - «14,«5G 

n 

CARE III N • 2 n (n^ + 1) ■ 162 
i - 1 

CARE III APPROACH 

• DEFINE SYSTEM STATE ONLY IN TERMS OF 
NUMBER OF EXISTING FAULTS 

• INDEPENDENTLY EVALUATE TRANSITION PARAMETERS __ 

AS A FUNCTION OF DISTRIBUTION OF POSSIBLE 

FAULT TYPES AND STATES 

• DETERMINE RELIABILITY USING KOLMOGOROV'S 
FORWARD DIFFERENTIAL EQUATIONS 

• NUMBER OF STATES DRASTICALLY REDUCED; 

TRANSITION RATES NECESSARILY TIME-DEPENDENT 81 


ii+jin 
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COMPUTER AIDED RELIABILITY ESTIMATION 
(CARE III! 


iNPui >- any mr.iiAi coMputik ramo 
m«,»M v in i iahi i i Ain i 
mil IIANI ’. 7 MIH 


EXIST ING/CONCEPHJAI 


SYSTEM DESIGN 



SYSTEM SUCCESS 
FAULT TREE 






INTERMITTENT 


TRANS.ENTS . 
s^iELF 

^ill t ,m»in\Nv / 


i ELECTRONIC 
i HYDRAULIC 
• MECHANICAL 


CYBER 175 
■j CLASS 

'computer 


•FLTTYP NFTVre-l.OEL-3.6E8,CU4CT-T.D8Ur-S.OE-8.CUPL0T-T* 
•STAGES NSTQES-a.M-ie.S,M-a.B, IRLPCD-4.RLPU)T-T* 

•FLTCAT NFCATS«2*1.JTYPC1.1 )-l.JTVP<i,2)-1, 

RUU 1.1 >- 1 . 0 C- 4 ,RLM 1,8 )-l.«E-S» 

•RMTIfC FT-IO..SYSFLQ-T.CPLFLQ-T* 

SIFT1 FMJLT-TREE 7-1-81 
18 3 3 
3 0 18 

SIFTl CRITICAL-FAULT PAIRS 
1 15 16 18 
1 1 18 
8 11 15 

16 8183456789 10 

17 8 11 18 13 14 15 

18 O 16 17 - 

SYS. 

FAILURE 


SYS. 

FAILURE 


SYSTEM FAILS IF STAGE 
1 OR 2 FAILS OR A 
CRITICAL FAULT PAIR 
OCCURS. 


SYSTEM TREE 



COR* 1 LITER 

V 

STAGE 

2/10 


T 




2 : : S BUS FORM 
A CRITICAL PAIR 
CAUSES A SYSTEM FAILURE 


Grx 


FAULT MODEL 


CRITICAL PAIR FAULT TREE 






















PERMANENT, TRANSIENT/INTERMITTENT FAULT ANALOG 


LOGICAL FAULT MODEL 
AFTER FAULT ARRIVAL 


PERMANENT FAULT 


S-A-l/S-A-0 

DETERMINISTIC: T p < t < - 


TRANSIENT/INTERMITTENT FAULT 
S-A-l/S-A-0 

STOCHASTIC t FOR DURATION OF 
S-A-l AND S-a-0 
EXPONENTIAL: m) • «e 


FAULT ARRIVAL MODEL 


WEIBULL: *<t) = wJkt" _ 1 e"* tw 
EXPONENTIAL: f(t) - xe' u 


TRANSIENT AND PERMANENT FAULTS 
CONVENTIONAL MARKOV MODEL 
2-UNIT SYSTEM 


x p = PERMANENT FAILURE RATE (ARRIVAL RATE) 
x T = TRANSIENT RATE (ARRIVAL RATE) 

i « PROPORTION OF TRANSIENTS THAT ARE MISTAKEN FOR PERMANENT FAILURES 


l- ( 2 xn♦ i* 2 x T )&t 


l - (x p + 1 -Xr )tt 


(2X P + 1 ■ 2X y ?At 


(lXn+ 1• U T )At 




Overall reliability model of two-unit system. 



Aggregated reliability model for a two-unit system. 

. System states defined by number of failed modules 
of each type 

. Transition rates determined by averaging overall 
failure types and states 




















